Your Neighbor Doesn't Even Need Your Wi-Fi Password Anymore. Cool. Cool Cool Cool.

I want you to picture something. You're sitting in your living room, blissfully unaware, while some coyote with a laptop sits in a car outside and just... walks through your router like it's an open gate. No password. No handshake. No nothing. Just root access, handed over like a complimentary grain bucket.

That's not a hypothetical. That's Tuesday now, apparently.

Researcher Quentin Kaiser dropped this delightful news on October 16. Broadcom's Wi-Fi setup software, the stuff baked into a genuinely alarming number of home routers, has a hole in the fence so wide you could drive a hay bale through it. If a wolf is within radio range, they can execute code as root without knowing the network password or completing any pairing step.

Radio range. As in, the parking lot. As in, your apartment building hallway. As in, the coffee shop next door where that guy has been "working on his novel" for four hours.

He demonstrated this against home gateways from three Belgian internet providers. In one case he just... read the Wi-Fi password straight off the device. Just took it. Like it was sitting on a fence post with a little bow on it.

The worst part? Still unpatched. The ointment has not arrived. The shepherds at Broadcom have not yet seen fit to shear this particular problem. So the hole in the fence remains open, and the flock remains completely unaware, probably clicking fake grain links and wondering why the internet is slow.

I'm fine. Everything is fine.

Remediation

Look, I know you want me to say "wait for the vendor patch." And yes, technically, do that when it arrives. Apply the ointment. Dip the router. You know the drill.

But while you're waiting for Broadcom to get their act together, here's what you can actually do right now:

• Disable WPS and any setup/provisioning features in your router admin panel if you can find them, which you can't, because the UI is a nightmare.
• Check if your ISP-supplied gateway is affected. If it's a Broadcom-based unit from a European provider, assume yes and panic accordingly.
• Segment your network. Put IoT garbage on its own pasture so when it gets compromised it doesn't take everything else down with it.
• Monitor for firmware updates from your ISP or router manufacturer. Then actually install them, unlike the last eight times.

That's it. That's all I've got. I'm going to go stare at a wall.

Go touch grass, the attacker already has.

Original Report: https://thehackernews.com/2026/10/unpatched-broadcom-wi-fi-flaw-lets.html